Riskcovery

CVE-2025-38737

cifs: Fix oops due to uninitialised variable

State
Published
Severity
9.8 Critical
Published
Sep 5, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix oops due to uninitialised variable

Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a2906d3316fc19bf0ade84618bb73eab604c447e to before 4931fe2dbe1cc0e7d350a4b51b0b330e43971d98Affected
  • a2906d3316fc19bf0ade84618bb73eab604c447e to before 6adaa9fae36f848afa7278945d725e197e33c496Affected
  • a2906d3316fc19bf0ade84618bb73eab604c447e to before 453a6d2a68e54a483d67233c6e1e24c4095ee4beAffected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.44 through 6.12.*Not affected
  • 6.16.4 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.